Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward local home-inventory guide, but users should be aware it may store sensitive details about valuables and locations.
Install only if you want a local personal inventory workflow. Before recording data, choose where it should live, avoid adding unnecessary serial numbers or receipt files, and be careful storing details about valuables, locations, insurance value, or lending history on shared or synced machines.
The activation criteria are broad enough to trigger on ordinary conversation about owning items, moving, or decluttering, which can cause the skill to activate without clear user intent. In this skill's context, that increases the chance of unsolicited collection or organization of sensitive household data such as valuables, locations, serial numbers, receipts, and insurance-related information.
The skill instructs creation of ~/inventory/ as workspace without indicating that it will modify the filesystem or obtaining user consent first. Even though the action is not inherently malicious, silent directory creation can violate user expectations and, in this case, may lead to persistent storage of highly sensitive inventory data about valuables and their locations.
No suspicious patterns detected.
